FreeBSD Ports: tor-devel

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora 9 : rb_libtorrent-0.12.1-2.fc9 (2009-6619)

This release adds an upstream patch to fix a directory traversal vulnerability which would allow a remote attacker to create or overwrite arbitrary files via a '..' dot dot and partial relative pathname in a specially crafted torrent. In addition to this, asio-devel has been added to the...

FreeBSD : tor-devel -- DNS resolution vulnerability (f59dda75-5ff4-11de-a13e-00e0815b8da8)

The Tor Project reports : A malicious exit relay could convince a controller that the client's DNS question resolves to an internal IP address. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML databas...

CentOS Security Advisory CESA-2009:1095 (firefox)

The remote host is missing updates to firefox announced in advisory CESA-2009:1095. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

openSUSE 10 Security Update : libopenssl-devel (libopenssl-devel-6291)

OpenSSL DTLS remote DoS in ChangeCipherSpec CVE-2009-1386 and in out-of-sequence message handling CVE-2009-1387 have been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. VID da185955-5738-11de-b857-000f20797ede OpenVAS Vulnerability Test $ Description: Auto generated from VID da185955-5738-11de-b857-000f20797ede Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: dokuwiki

The remote host is missing an update to the system as announced in the referenced advisory. VID 4f838b74-50a1-11de-b01f-001c2514716c OpenVAS Vulnerability Test $ Description: Auto generated from VID 4f838b74-50a1-11de-b01f-001c2514716c Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:123 (opensc)

The remote host is missing an update to opensc announced via advisory MDVSA-2009:123. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Fedora Core 9 FEDORA-2009-5552 (pidgin)

The remote host is missing an update to pidgin announced via advisory FEDORA-2009-5552. OpenVAS Vulnerability Test $Id: fcore20095552.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5552 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

openSUSE 10 Security Update : libopenssl-devel (libopenssl-devel-6268)

Three remote DoS vulnerabilities have been fixed in OpenSSL: a DTLS epoch record buffer memory DoS CVE-2009-1377, a DTLS fragment handling memory DoS CVE-2009-1378 and a DTLS fragment read after a free DoS CVE-2009-1379. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

CentOS Security Advisory CESA-2009:1061 (freetype)

The remote host is missing updates to freetype announced in advisory CESA-2009:1061. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

openSUSE 10 Security Update : ganglia-monitor-core (ganglia-monitor-core-6259)

A stack-based buffer overflow in ganglia's buffer processpath function has been fixed. CVE-2009-0241 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE 10 Security Update : xine-devel (xine-devel-6230)

This update of xine-lib fixes an integer overflow in the qterror parsetrakatom function in that leads to a heap-based overflow and allows remote attackers to execute arbitrary code via a malformed Quicktime movie file. CVE-2009-1274 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Fedora 9 : giflib-4.1.3-10.fc9 (2009-5118)

CVE-2005-2974: NULL pointer dereference crash 494826 - CVE-2005-3350: Memory corruption via a crafted GIF 494823 - Solved multilib problems with documentation 465208, 474538 - Removed static library from giflib-devel package 225796 c1 Note that Tenable Network Security has extracted the preceding...

openSUSE 10 Security Update : ghostscript-devel (ghostscript-devel-6246)

Specially crafted file could cause a heap-overflow in JBIG2 decoder CVE-2009-0196, an integer overflow in ICC library CVE-2009-0792, a buffer overflow in BaseFont writer module CVE-2008-6679 or crash the CCITTFax decoder CVE-2007-6725. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CentOS Security Advisory CESA-2009:0476 (pango)

The remote host is missing updates to pango announced in advisory CESA-2009:0476. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-onl...

openSUSE 10 Security Update : libopenssl-devel (libopenssl-devel-6173)

This update of openssl fixes the following problems : - CVE-2009-0590: ASN1STRINGprintex function allows remote denial of service - CVE-2009-0789: denial of service due to malformed ASN.1 structures %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...

CentOS Security Advisory CESA-2009:0436 (firefox)

The remote host is missing updates to firefox announced in advisory CESA-2009:0436. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

MDKA-2007:033 : xmlrpc-epi

The xmlrpc-epi package was using an old internal copy of the expat XML parser, which caused random crashes in second-life. The updated packages provided fix this by relying on the expat system library. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is no...

MDVA-2008:153 : phonon

In Mandriva Linux 2009.0, phonon's signal availableAudioCaptureDevicesChanged was not connected, causing the KDE4 desktop to be unable to play OGG files. This update corrects the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...